Class StrictTransportSecurityServerHttpHeadersWriter
java.lang.Object
org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
- All Implemented Interfaces:
ServerHttpHeadersWriter
public final class StrictTransportSecurityServerHttpHeadersWriter
extends Object
implements ServerHttpHeadersWriter
Writes the Strict-Transport-Security if the request is secure.
- Since:
- 5.0
-
Field Summary
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionvoid
setIncludeSubDomains
(boolean includeSubDomains) Sets if subdomains should be included.void
Sets the max age of the header.void
setPreload
(boolean preload) Sets if preload should be included.reactor.core.publisher.Mono<Void>
writeHttpHeaders
(org.springframework.web.server.ServerWebExchange exchange) Write the headers to the response.
-
Field Details
-
STRICT_TRANSPORT_SECURITY
- See Also:
-
-
Constructor Details
-
StrictTransportSecurityServerHttpHeadersWriter
public StrictTransportSecurityServerHttpHeadersWriter()
-
-
Method Details
-
writeHttpHeaders
public reactor.core.publisher.Mono<Void> writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange) Description copied from interface:ServerHttpHeadersWriter
Write the headers to the response.- Specified by:
writeHttpHeaders
in interfaceServerHttpHeadersWriter
- Returns:
- A Mono which is returned to the
Supplier
of theReactiveHttpOutputMessage.beforeCommit(Supplier)
.
-
setIncludeSubDomains
public void setIncludeSubDomains(boolean includeSubDomains) Sets if subdomains should be included. Default is true- Parameters:
includeSubDomains
- if subdomains should be included
-
setPreload
public void setPreload(boolean preload) Sets if preload should be included. Default is false
See Website hstspreload.org for additional details.
- Parameters:
preload
- if preload should be included- Since:
- 5.2.0
-
setMaxAge
Sets the max age of the header. Default is a year.- Parameters:
maxAge
- the max age of the header
-